Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier: yaPz5xQl93SA4FD+zcIypZBI8WvHEbk0VuoCyiXZEzU=
Subject key identifier: D5:50:8A:8E:94:72:7B:E2:F5:A9:DB:55:42:C9:D3:57:A0:E1:75:F4
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial: 019921B26C61B66F148A6D3ABCE9724C4655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number: 136D
Signing time: Sun 07 Sep 2025 01:02:45 +0000
Manifest this update: Sun 07 Sep 2025 01:02:45 +0000
Manifest next update: Mon 08 Sep 2025 01:02:45 +0000
Files and hashes: 1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=)
2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: +XZkRG2hsFY10wuIfrar4zpRFR56SbZcMZdV0kO5/zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:6c:61:b6:6f:14:8a:6d:3a:bc:e9:72:4c:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Validity
Not Before: Sep 7 01:02:45 2025 GMT
Not After : Sep 8 01:02:45 2025 GMT
Subject: CN=d5508a8e94727be2f5a9db5542c9d357a0e175f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:74:1a:c5:e1:cc:6c:0e:96:30:35:7c:30:
d5:36:46:94:1b:21:d5:ac:77:c9:da:e1:4c:aa:31:
6d:1b:20:30:ce:0a:4d:c3:27:31:52:19:65:dc:80:
7d:bd:2d:d5:d2:22:a4:57:7a:10:89:86:31:03:43:
f2:24:fb:a2:d1:8f:9c:a1:43:bf:0d:a7:18:a2:cc:
f5:58:07:89:91:45:61:46:a7:dd:cc:91:4c:ff:21:
9f:38:5d:5e:bb:53:f7:f0:ae:ae:88:9b:11:7d:06:
d8:5b:57:f3:a5:0c:f3:1c:0a:b1:5f:e6:4a:a2:02:
c5:a0:5c:3e:a9:1f:65:f8:cf:41:9a:43:b8:90:cc:
d9:ca:8c:c5:8d:fb:14:f2:0a:58:dc:29:65:a2:d2:
f7:3d:f7:4c:93:5a:de:95:8b:8c:ab:7b:32:d5:97:
0f:43:5e:6c:3b:dd:5e:19:cb:da:4f:51:7c:1a:77:
cb:b5:42:83:c1:9c:07:e3:0e:82:8c:34:89:7c:8e:
71:4d:5a:2d:87:40:a4:d8:1a:7b:00:44:d0:63:9b:
83:84:6e:d0:cb:66:fe:5a:13:58:7c:7b:b4:c9:c5:
b3:46:b3:ab:0d:a8:bc:49:de:bc:01:0c:5e:3d:82:
bb:7f:a7:ca:c8:08:5a:49:eb:b1:03:89:e6:fa:f4:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:8A:8E:94:72:7B:E2:F5:A9:DB:55:42:C9:D3:57:A0:E1:75:F4
X509v3 Authority Key Identifier:
keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:50:a8:0a:5b:50:81:53:0f:fb:31:53:7c:6a:bc:4a:ce:eb:
14:4e:a9:60:38:42:3a:0d:80:85:08:62:4e:1d:9a:4a:78:60:
17:77:c6:0a:23:a8:68:1a:51:b1:3a:ab:56:7e:58:aa:47:58:
c4:ba:99:0a:0e:ab:54:8f:e0:07:2d:87:2a:bb:f1:32:11:b6:
06:2a:6e:b4:62:d0:0d:e4:2b:be:56:90:c8:8c:a8:c4:64:06:
bc:1c:96:f4:4b:ee:cd:40:1f:8d:5d:f6:8e:d8:2c:cd:02:c6:
8c:55:35:b6:89:3a:94:75:32:c2:47:05:b6:16:05:e9:66:6c:
f9:f0:c6:88:a6:96:fe:fa:b1:70:e3:7d:7e:26:5e:3f:0e:73:
73:b8:51:16:3e:0c:5d:1c:7c:28:88:f1:e2:ff:05:52:94:ec:
9a:b3:f2:d3:47:45:e1:0c:20:6b:3b:c6:dd:69:e1:c8:e4:32:
5e:c6:de:7b:08:20:ff:54:ae:c3:1e:60:af:f7:8c:0e:92:59:
42:8c:4c:f1:f1:97:b8:da:95:0a:69:3b:7e:13:63:5a:04:1a:
bb:39:52:d0:cb:aa:9a:8b:11:62:e6:3e:80:68:ed:73:3d:25:
79:54:5d:96:47:87:07:ca:a5:b6:ed:ef:ff:91:0f:cc:19:b3:
29:62:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:59 2025 by rpki-client